Guidelines for OPSEC in the landing page optional
MITIG42 · Optional: Available, but it has to be turned on or chosen. · Defined in mitigations.py:87
Threats it mitigates
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| DNS requests to news organization's subdomain for SecureDrop landing page, freedom.press, torproject.org Tor activity, SD submissions may be correlated THREAT73 | inform | 12 high | 9 high |
| Source reveals that they are using securedrop/leaking documents THREAT76 | partially mitigated | 9 high | 6 medium |
| Source activity is compromised via physical surveillance (e.g.: camera) THREAT131 | partially mitigated | 6 medium | 6 medium |
| Source uses employer/corporate device THREAT78 | inform | 6 medium | 4 medium |
| Source searches for SecureDrop on search engines THREAT156 | accepted | 4 medium | 4 medium |
Possible further mitigation for
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Source uses employer/corporate device THREAT78 | inform | 6 medium | 4 medium |